Georges D.

I’m responsible of AM Products with a team of 4 IAM Architect/Engineer. My Objective is to review the whole AM landscape to improve, review and automate current processes, secure and promote self-service capabilities to our end users. I conducted hands-on activities/POC, security audit, put in place a new IAM vision aligned with IT and Security Strategy and proposed a challenging IAM roadmap. ITIL and Agile Methodologies. Environment is composed of 20000 employees worldwide. I acted as IAM Technology Manager - IAM Architect/Engineer, I was in charge of the Design, Architecture, Integration, migration, support phases and managing the different IAM Projects • Audit existing IAM ecosystem on all aspects of IAM and Security • Define IAM Vision and Strategy • Develop and implement IAM Policies, procedures, and guidance. • Integrate any enterprise applications into IAM systems providing SSO, federation, authentication (Ldap, Kerberos, SAMLv2, OIDC), authorization (OAuth2) and provisioning (SCIM) standards. • API Governance & Security using Jwt/OAuth2 with Google Apigee API Mgmt & Entra ID. • Monitor and provide L3 support, audit access and ensure compliance with organisational policies and regulations. • Close collaboration with IT teams (Infrastructure, Workplace, Collaboration & Security) • Raise awareness on IAM best practices, policies, and procedures. • Monitoring, Audit, Reporting and KPI • Participating in Office 365 Upgrade, Microsoft 365 (Teams, SharePoint Online, Licence Optimization), Intune, IGA Saviynt, CyberArk PAM, CATO SD-WAN/ZTNA • Communication and working relationships with external partners, vendors, consultants. • Automation with PowerShell, Terraform for Azure Landing Zone • Technologies involved are OpenLDAP, OpenAM, ctive Directory, Entra ID (SSPR, MFA, Conditional Access, Privileged Identity Management, Identity Protection, AuthN Strength, Tenant hardening)

I’m responsible of IAM Platform at TCS. One of my main objectives is to review the whole IAM landscape to improve, review and automate current processes, secure and promote self-service capabilities to our end users. I conducted a security audit, put in place a new IAM vision aligned with IT and Security Strategies and proposed a challenging IAM roadmap for 2024/2025. Environment is composed of around 2000 employees. I acted as IAM Platform owner and was in charge of Architecture, Design, Integration, migration, L3 support phases. - Audit existing IAM ecosystem on all aspects of IAM and Cloud Security - Architecture and Design IAM Patterns for Authentication, Authorization and Provisioning - Integrate Applications to Entra ID (SSO with SAML/OIDC and Just-In-Time or SCIM automatic Provisioning), Protected custom API (OAuth2 – Scopes – App roles) based on IBM API Connect - Promote a new modern IAM vision, ZeroTrust Security strategy and a Roadmap for the new IAM platform based on Microsoft Entra ID P1/P2 + Microsoft 365 E3 - Review Netwrix UserCube IGA capabilities (IGA) and propose evolutions. - Simplify and automate existing IAM Processes and promote native Entra ID Self-Service portal (MyApps/MyGroups/MyAccess) - Coordinate with IAM team the tasks, projects and IAM vision - Azure AD B2C : Review existing Custom policies/User Flows. Working with Client applications (Web/SPA/Mobile) and API integration - Decommission old IAM Systems (ADFS/ WAP, Microsoft Identity Manager (MIM) in progress) - Manage new Security/IAM Baseline with the TCS Security Officer (Naming Convention, Security Baseline, AuthN Methods (Passwordless approach with Fido2, Temporary Access Pass (TAP)), Advanced Conditional Access Policies) - Work on All IAM evolution topics (Entra ID App Proxy, B2B Management, Password Protection, External Identities, SSPR, Access Review, Privileged Identity Management (PIM), Access packages, Identity Protection, PAM with Delinea solution)

I'm involved in many interresting challenges at m3 Group. Existing Infrastructure needed to be modernized and we decided to go with an hybrid Cloud approach (IaaS, PaaS) and SaaS with Microsoft 365 services. I'm leading the cloud architecture, design, integration and projects coordination with our different internal teams and external partners to make our IT projects a success. 1/ Modernize existing Infrastructure; - Microsoft-Oriented infrastructure - Windows 11 Automatic Deployment - Active Directory Hardening - Messaging and Unified Communication - PKI implementation 2/ Identity and Access Management (IAM) modernization: - Consolidation of all m3 companies into a new single m3 group domain with AD, ADMT and MIM. - Azure AD Conditional Access - Azure AD Self-Service Password Reset (SSPR) - Integration of applications to Azure AD and Implement SSO with federation approach (SAML, oAuth, OIDC) - Hybrid Identity : Azure AD Connect, Password Hash Sync with Seamless SSO, Hybrid Azure AD Join), SCIM - PasswordLess approach (Windows Hello for Business Cloud Trust) - Securing BYOD with Intune 3/ Hybrid cloud Infrastructure approach: I acted as Azure Cloud Architect and was in charge of Architecture, Design and Integration phases. - Azure and Microsoft 365 Subscription and Licences (Cost Optimization, PAYG, CSP, EA) - Azure Governance (Naming, RBAC, Azure Policy, KeyVault, Managed Identity) - Azure Network Security (Azure Application Gateway, Azure Firewall, Azure Bastion, NAT gateway, vNet Peering, NSG, UDR, Azure VPN, Cisco Meraki VMx S2S VPN, Cisco Umbrella DNS, Azure Private Link) 4/ Microsoft 365 Migration I'm leading the Governance, Plan, build, Coordination, Implementation, Test, Documentation. - Migration to Exchange Online - Migration of on-prem Filer to OneDrive and SharePoint Online - Migration of Skype for Business to MS Teams with PSTN - Migration of On-prem Phone System to Cloud managed phone Solution

Working on Azure & M365 projects with a focus on Advisory, Identity, Security, Architecture, Governance, Strategy, Design, Device Management. - IAM Project Manager & Technical Lead: IAM program : Hybrid Identity, Zero Trust, PasswordLess (W10 Signin with Fido2, MS auth), B2B, B2C, Self-Service.... Continuity of my previous job at ICRC (International Committee of the Red Cross) - Microsoft 365 Compliance: Information Governance & Record Management - Microsoft 365 & Azure AD Security Audit: Assessment on Azure AD, Microsoft Endpoint Manager, SharePoint Online, MS Teams, Exchange Online, M365 Compliance and Security (Microsoft Defender for Endpoint and for Office 365) - Azure Migrate/Readiness Assessment: HyperV Azure readiness Assessment - Azure Virtual Desktop (AVD + FSLogix + Scalling Plan) & Windows 365 Enterprise in Hybrid Cloud: Advisory, Network-Security Architecture, deployment Azure Virtual Desktop with Azure AD DS/Azure AD Join with FSLogix, setup IPsec Site to Site VPN with Azure, VNET Peering. Azure/M365 Governance. - Google Workspace to M365 Migration : Advisory, Governance, Security. Integration Google Cloud Platform with Azure AD (SSO/SCIM provisioning) - MS Teams Governance, adoption and Security

Technical skills: - Identity Management : System Center Orchestrator (Manage Identity LifeCycle based on SAP/Successfactor)) & Scripts PowerShell / Dos Batch - Identity Federation : SSO with ADFS v3 using SAMLv2 - Active Directory : Active Directory / ADMT/ Quest ARS - FIM 2010 R2 SP1 (Forefront Identity Manager) : FIM Sync & FIM Portal IT Projects involved : - Direct Access : Replacement of Cisco AnyConnect (DA(nls/probe)/Isatap) - Sécurity : TMP Migration to KEMP Loadmaster - Hybrid MS Exchange 2013/Online & Archiving to MS Azure StorSimple - Hybrid Identity : Azure AD Connect with Federation - Certification ISO 27001 - Documentation (Architecture/Exploitation/Installation/Manuel de migration) - Knowledge Transfer to Operationnal Teams. - Level 3 Support

1/ Integration (Installation - Configuration - Best Practice) & Architecture 2/ Technical Project Manager / Pre-sale / Audit / Advisor / TroubleShooting 3/ Technical skills : - Identity & Access Management : Microsoft Active Directory / ADMT / ADFS / FIM / DirSync - Virtualization : VMware vSphere 5.x / View horizon - Citrix XenDesktop/XenServer - Microsoft HyperV - Systems : Microsoft Server/Linux - Cloud Computing : Azure VPN site-to-Site (with Fortigate) - Messaging Migration : From Exchange OnPrem/Google Mail to Exchange Online (Office 365) - Network : Switching Lan Cisco/Dell/HP- FiberChannel Brocade - Security : Firewall/UTM Sonicwall), Backup & Storage (Dell MD/EQ-EMC VNX) - Knowledge Transfer - Technical Documentation : Installation / Exploitation / Architecture / User Guide / Audit / migration manual / Testing plan…

- Maintient en Condition Opérationnel (MCO) et Evolution du SI - Virtualisation (Linux Virtual Server / Microsoft HyperV) - Monitoring based on Nagios/Cacti/WhatsUp - System Administration (MS : AD,GPO, Scripting PowerShell & Linux Debian : OpenLDAP,Apache, Samba, Scripting Shell) - Administration : MS Exchange 2007/ DB SQL Server - Network Administration (Cisco catalyst, vlan, vtp...) - Sécurity (Parefeu / Mise à jour/ Antivirus / Sauvegarde) - Workstations & Servers management / Level 2 support

- Gestion de Projet GED personnalisée (Gestion Electronique du Document) pour le CETELEM - Gestion du WorkFlow de Numérisation / d'indexation et mise en GED - Relation entre les équipes de production, le client Cetelem/BNP Paribas et nos différents partenaires sur le projet. Participation active aux tests d’intégration/recette et mise en production des applications. - Référent technique sur le projet - Administration de l'infrastructure (Systèmes : Serveurs FreeBSD, Serveurs Windows - Réseau : Switching Cisco/Dell, Interconnexion Intersite VPN/IPSec - Sécurité : Firewall, PRA - Base de données : SQL Server - Monitoring : Cacti/Nagios - Scripting : PowerShell/VB/Batch Dos - Archivage probant : EMC Centera/Clariion)

Support (Salle des marchés, Investment Banking Division, Asset-Management, Private Banking) • Projet Déménagement : Participation de la mise en place du Help Desk sur le nouveau site, déploiement des postes, Installation et configuration du matériel informatique HP (PC, imprimantes, scanners), fax, Black Berry, PDA, photocopieuses Xerox et Canon, ToIP, Installation logiciels, pilotes, maintenance, wifi, connection VPN itinérant via secure ID RSA • Gestion du parc (300 postes Windows XP), Migration Omni 3.3.1 vers Omni 3.4.1, prise d’appels et résolution des incidents niveau 1/2,, Sauvegardes DTA, brassages et tests réseaux. • Market data (Bloomberg v5/Reuters 3000xtra), MS Office 2000/2003 (Word, Excel, Access, PowerPoint, Outlook/Exchange), Applications metiers Investment Banking (Fact Set, Active graph, DataStream, Power pitch, Power plus Pro, Factiva, Spider web, DocsOpen), Applications metiers Private banking (SAMIC) • Saisie et suivi des incidents à l’aide du logiciel de Call Traking Remedy, Gestion des priorités. • Escalade des incidents vers les équipes à Londres (Administration système, Exchange, Easy Request, Support applicatif) • Administration système sous Windows Server 2000/2003 (Active directory, DNS), gestion des comptes utilisateurs / matériels

1 Year travelling around the World : Spain, Portutal, Belgium, Netherland, Switzerland, Austria, United kingdom, Scotland, Norway, France, Germany, Lituania, Lettonia, Estonia, Russia, Turkey, Mongolia, China, Vietnam, Combodia, Laos, Thailand, Japon, India, Pakistan, Lebanon, Singapore, Cameroun, Burkina Faso, Ghana, Madagascar, Mauritius, Seychelles, La reunion, Sri Lanka, Dubai, Kenya, Tanzania (Climbing Kilimandjaro), Morocco, Mauritania, USA, Canada, Mexico, Guyana.

Administrateur Système (VIA/VIE) au SCAC (Service Coopération et d'Action Culturelles) • Administration système (85 Postes sous EOLE Windows 2000 – Serveur NT4/2000) : Gestion des comptes utilisateurs, matériels, applications et messagerie SCU, sauvegardes DTA, restauration de données, mises à jour logiciels, migration et déploiement du parc de EOLE Windows NT vers EOLE Windows 2000. • Administration serveurs : Active Directory, Configuration, Supervision, Maintenance, Installation, Sécurité (Antivirus, Firewall, Spyware), Ghost, VNC, monitoring (what’s up) • Gestion du parc informatique : Assistance utilisateurs (software, hardware) inventaires, gestion des consommables informatique, brassage, câblage, installation et déploiement des postes clients et périphériques (DELL et HP), MS Office • Maintenances ponctuelles sur le site Intranet du SCAC et du site de l'Ambassade de France au Maroc (Cold fusion) • Mise en place d’une application Access en VBA.